{ "document": { "aggregate_severity": { "text": "Critical" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_alt_python/debian10/vex/2022/cve-2022-45061-els_alt_python-debian10.json" } ], "title": "Security update on CVE-2022-45061", "tracking": { "current_release_date": "2025-12-24T10:12:53Z", "generator": { "date": "2025-12-24T10:12:53Z", "engine": { "name": "pyCSAF" } }, "id": "CVE-2022-45061-ELS_ALT_PYTHON-DEBIAN10", "initial_release_date": "2022-11-09T07:15:00Z", "revision_history": [ { "date": "2022-11-09T07:15:00Z", "number": "1", "summary": "Initial version" }, { "date": "2025-10-10T10:50:27Z", "number": "2", "summary": "Official Publication" }, { "date": "2025-11-27T18:41:25Z", "number": "3", "summary": "Update document" }, { "date": "2025-12-24T10:12:53Z", "number": "4", "summary": "Update document" } ], "status": "final", "version": "4" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Debian 10", "product": { "name": "Debian 10", "product_id": "Debian-10", "product_identification_helper": { "cpe": "cpe:2.3:o:debian:debian_linux:10:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Debian" } ], "category": "vendor", "name": "Software in the Public Interest, Inc." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "alt-python27-debug-0:2.7.18-6.amd64", "product": { "name": "alt-python27-debug-0:2.7.18-6.amd64", "product_id": "alt-python27-debug-0:2.7.18-6.amd64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python27-debug@2.7.18-6?arch=amd64" } } }, { "category": "product_version", "name": "alt-python27-devel-0:2.7.18-6.amd64", "product": { "name": "alt-python27-devel-0:2.7.18-6.amd64", "product_id": "alt-python27-devel-0:2.7.18-6.amd64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python27-devel@2.7.18-6?arch=amd64" } } }, { "category": "product_version", "name": "alt-python27-tkinter-0:2.7.18-6.amd64", "product": { "name": "alt-python27-tkinter-0:2.7.18-6.amd64", "product_id": "alt-python27-tkinter-0:2.7.18-6.amd64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python27-tkinter@2.7.18-6?arch=amd64" } } }, { "category": "product_version", "name": "alt-python27-idle-0:2.7.18-6.amd64", "product": { "name": "alt-python27-idle-0:2.7.18-6.amd64", "product_id": "alt-python27-idle-0:2.7.18-6.amd64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python27-idle@2.7.18-6?arch=amd64" } } }, { "category": "product_version", "name": "alt-python27-test-0:2.7.18-6.amd64", "product": { "name": "alt-python27-test-0:2.7.18-6.amd64", "product_id": "alt-python27-test-0:2.7.18-6.amd64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python27-test@2.7.18-6?arch=amd64" } } }, { "category": "product_version", "name": "alt-python27-tools-0:2.7.18-6.amd64", "product": { "name": "alt-python27-tools-0:2.7.18-6.amd64", "product_id": "alt-python27-tools-0:2.7.18-6.amd64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python27-tools@2.7.18-6?arch=amd64" } } }, { "category": "product_version", "name": "alt-python27-0:2.7.18-6.amd64", "product": { "name": "alt-python27-0:2.7.18-6.amd64", "product_id": "alt-python27-0:2.7.18-6.amd64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python27@2.7.18-6?arch=amd64" } } }, { "category": "product_version", "name": "alt-python27-libs-0:2.7.18-6.amd64", "product": { "name": "alt-python27-libs-0:2.7.18-6.amd64", "product_id": "alt-python27-libs-0:2.7.18-6.amd64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/alt-python27-libs@2.7.18-6?arch=amd64" } } } ], "category": "architecture", "name": "amd64" } ], "category": "vendor", "name": "TuxCare" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "alt-python36-tools-0:3.6.15-14.amd64", "product": { "name": "alt-python36-tools-0:3.6.15-14.amd64", "product_id": "alt-python36-tools-0:3.6.15-14.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-python36-tools@3.6.15-14?arch=amd64" } } }, { "category": "product_version", "name": "alt-python36-test-0:3.6.15-14.amd64", "product": { "name": "alt-python36-test-0:3.6.15-14.amd64", "product_id": "alt-python36-test-0:3.6.15-14.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-python36-test@3.6.15-14?arch=amd64" } } }, { "category": "product_version", "name": "alt-python36-libs-0:3.6.15-14.amd64", "product": { "name": "alt-python36-libs-0:3.6.15-14.amd64", "product_id": "alt-python36-libs-0:3.6.15-14.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-python36-libs@3.6.15-14?arch=amd64" } } }, { "category": "product_version", "name": "alt-python36-devel-0:3.6.15-14.amd64", "product": { "name": "alt-python36-devel-0:3.6.15-14.amd64", "product_id": "alt-python36-devel-0:3.6.15-14.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-python36-devel@3.6.15-14?arch=amd64" } } }, { "category": "product_version", "name": "alt-python36-0:3.6.15-14.amd64", "product": { "name": "alt-python36-0:3.6.15-14.amd64", "product_id": "alt-python36-0:3.6.15-14.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-python36@3.6.15-14?arch=amd64" } } }, { "category": "product_version", "name": "alt-python36-debug-0:3.6.15-14.amd64", "product": { "name": "alt-python36-debug-0:3.6.15-14.amd64", "product_id": "alt-python36-debug-0:3.6.15-14.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-python36-debug@3.6.15-14?arch=amd64" } } }, { "category": "product_version", "name": "alt-python36-tkinter-0:3.6.15-14.amd64", "product": { "name": "alt-python36-tkinter-0:3.6.15-14.amd64", "product_id": "alt-python36-tkinter-0:3.6.15-14.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/alt-python36-tkinter@3.6.15-14?arch=amd64" } } } ], "category": "architecture", "name": "amd64" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "alt-python27-debug-0:2.7.18-6.amd64 as a component of Debian 10", "product_id": "Debian-10:alt-python27-debug-0:2.7.18-6.amd64" }, "product_reference": "alt-python27-debug-0:2.7.18-6.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python27-devel-0:2.7.18-6.amd64 as a component of Debian 10", "product_id": "Debian-10:alt-python27-devel-0:2.7.18-6.amd64" }, "product_reference": "alt-python27-devel-0:2.7.18-6.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python27-tkinter-0:2.7.18-6.amd64 as a component of Debian 10", "product_id": "Debian-10:alt-python27-tkinter-0:2.7.18-6.amd64" }, "product_reference": "alt-python27-tkinter-0:2.7.18-6.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python27-idle-0:2.7.18-6.amd64 as a component of Debian 10", "product_id": "Debian-10:alt-python27-idle-0:2.7.18-6.amd64" }, "product_reference": "alt-python27-idle-0:2.7.18-6.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python27-test-0:2.7.18-6.amd64 as a component of Debian 10", "product_id": "Debian-10:alt-python27-test-0:2.7.18-6.amd64" }, "product_reference": "alt-python27-test-0:2.7.18-6.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python27-tools-0:2.7.18-6.amd64 as a component of Debian 10", "product_id": "Debian-10:alt-python27-tools-0:2.7.18-6.amd64" }, "product_reference": "alt-python27-tools-0:2.7.18-6.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python27-0:2.7.18-6.amd64 as a component of Debian 10", "product_id": "Debian-10:alt-python27-0:2.7.18-6.amd64" }, "product_reference": "alt-python27-0:2.7.18-6.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python27-libs-0:2.7.18-6.amd64 as a component of Debian 10", "product_id": "Debian-10:alt-python27-libs-0:2.7.18-6.amd64" }, "product_reference": "alt-python27-libs-0:2.7.18-6.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python36-tools-0:3.6.15-14.amd64 as a component of Debian 10", "product_id": "Debian-10:alt-python36-tools-0:3.6.15-14.amd64" }, "product_reference": "alt-python36-tools-0:3.6.15-14.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python36-test-0:3.6.15-14.amd64 as a component of Debian 10", "product_id": "Debian-10:alt-python36-test-0:3.6.15-14.amd64" }, "product_reference": "alt-python36-test-0:3.6.15-14.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python36-libs-0:3.6.15-14.amd64 as a component of Debian 10", "product_id": "Debian-10:alt-python36-libs-0:3.6.15-14.amd64" }, "product_reference": "alt-python36-libs-0:3.6.15-14.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python36-devel-0:3.6.15-14.amd64 as a component of Debian 10", "product_id": "Debian-10:alt-python36-devel-0:3.6.15-14.amd64" }, "product_reference": "alt-python36-devel-0:3.6.15-14.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python36-0:3.6.15-14.amd64 as a component of Debian 10", "product_id": "Debian-10:alt-python36-0:3.6.15-14.amd64" }, "product_reference": "alt-python36-0:3.6.15-14.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python36-debug-0:3.6.15-14.amd64 as a component of Debian 10", "product_id": "Debian-10:alt-python36-debug-0:3.6.15-14.amd64" }, "product_reference": "alt-python36-debug-0:3.6.15-14.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "alt-python36-tkinter-0:3.6.15-14.amd64 as a component of Debian 10", "product_id": "Debian-10:alt-python36-tkinter-0:3.6.15-14.amd64" }, "product_reference": "alt-python36-tkinter-0:3.6.15-14.amd64", "relates_to_product_reference": "Debian-10" } ] }, "vulnerabilities": [ { "cve": "CVE-2022-45061", "cwe": { "id": "CWE-407", "name": "Inefficient Algorithmic Complexity" }, "notes": [ { "category": "description", "text": "An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing some inputs to the IDNA (RFC 3490) decoder, such that a crafted, unreasonably long name being presented to the decoder could lead to a CPU denial of service. Hostnames are often supplied by remote servers that could be controlled by a malicious actor; in such a scenario, they could trigger excessive CPU consumption on the client attempting to make use of an attacker-supplied supposed hostname. For example, the attack payload could be placed in the Location header of an HTTP response with status code 302. A fix is planned in 3.11.1, 3.10.9, 3.9.16, 3.8.16, and 3.7.16.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "Debian-10:alt-python27-0:2.7.18-6.amd64", "Debian-10:alt-python27-debug-0:2.7.18-6.amd64", "Debian-10:alt-python27-devel-0:2.7.18-6.amd64", "Debian-10:alt-python27-idle-0:2.7.18-6.amd64", "Debian-10:alt-python27-libs-0:2.7.18-6.amd64", "Debian-10:alt-python27-test-0:2.7.18-6.amd64", "Debian-10:alt-python27-tkinter-0:2.7.18-6.amd64", "Debian-10:alt-python27-tools-0:2.7.18-6.amd64", "Debian-10:alt-python36-0:3.6.15-14.amd64", "Debian-10:alt-python36-debug-0:3.6.15-14.amd64", "Debian-10:alt-python36-devel-0:3.6.15-14.amd64", "Debian-10:alt-python36-libs-0:3.6.15-14.amd64", "Debian-10:alt-python36-test-0:3.6.15-14.amd64", "Debian-10:alt-python36-tkinter-0:3.6.15-14.amd64", "Debian-10:alt-python36-tools-0:3.6.15-14.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els-alt-python/cve/CVE-2022-45061" }, { "category": "external", "summary": "https://github.com/python/cpython/issues/98433", "url": "https://github.com/python/cpython/issues/98433" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2023/05/msg00024.html", "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00024.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2023/06/msg00039.html", "url": "https://lists.debian.org/debian-lts-announce/2023/06/msg00039.html" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2AOUKI72ACV6CHY2QUFO6VK2DNMVJ2MB/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2AOUKI72ACV6CHY2QUFO6VK2DNMVJ2MB/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/35YDIWCUMWTMDBWFRAVENFH6BLB65D6S/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/35YDIWCUMWTMDBWFRAVENFH6BLB65D6S/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4WBZJNSALFGMPYTINIF57HAAK46U72WQ/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4WBZJNSALFGMPYTINIF57HAAK46U72WQ/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/63FS6VHY4DCS74HBTEINUDOECQ2X6ZCH/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/63FS6VHY4DCS74HBTEINUDOECQ2X6ZCH/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WQPHKGNXUJC3TC3BDW5RKGROWRJVSFR/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7WQPHKGNXUJC3TC3BDW5RKGROWRJVSFR/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B3YI6JYARWU6GULWOHNUROSACT54XFFS/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B3YI6JYARWU6GULWOHNUROSACT54XFFS/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B4MYQ3IV6NWA4CKSXEHW45CH2YNDHEPH/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B4MYQ3IV6NWA4CKSXEHW45CH2YNDHEPH/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BWJREJHWVRBYDP43YB5WRL3QC7UBA7BR/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BWJREJHWVRBYDP43YB5WRL3QC7UBA7BR/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTPVDZDATRQFE6KAT6B4BQIQ4GRHIIIJ/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GTPVDZDATRQFE6KAT6B4BQIQ4GRHIIIJ/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IN26PWZTYG6IF3APLRXQJBVACQHZUPT2/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IN26PWZTYG6IF3APLRXQJBVACQHZUPT2/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JCDJXNBHWXNYUTOEV4H2HCFSRKV3SYL3/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JCDJXNBHWXNYUTOEV4H2HCFSRKV3SYL3/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JTYVESWVBPD57ZJC35G5722Q6TS37WSB/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JTYVESWVBPD57ZJC35G5722Q6TS37WSB/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KNE4GMD45RGC2HWUAAIGTDHT5VJ2E4O4/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KNE4GMD45RGC2HWUAAIGTDHT5VJ2E4O4/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKWAMPURWUV3DCCT4J7VHRF4NT2CFVBR/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LKWAMPURWUV3DCCT4J7VHRF4NT2CFVBR/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O67LRHDTJWH544KXB6KY4HMHQLYDXFPK/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O67LRHDTJWH544KXB6KY4HMHQLYDXFPK/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORVCQGJCCAVLN4DJDTWGREFCUWXKQRML/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORVCQGJCCAVLN4DJDTWGREFCUWXKQRML/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PLQ2BNZVBBAQPV3SPRU24ZD37UYJJS7W/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PLQ2BNZVBBAQPV3SPRU24ZD37UYJJS7W/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QCKD4AFBHXIMHS64ZER2U7QRT33HNE7L/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QCKD4AFBHXIMHS64ZER2U7QRT33HNE7L/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QLUGZSEAO3MBWGKCUSMKQIRYJZKJCIOB/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QLUGZSEAO3MBWGKCUSMKQIRYJZKJCIOB/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDK3ZZBRYFO47ET3N4BNTKVXN47U6ICY/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RDK3ZZBRYFO47ET3N4BNTKVXN47U6ICY/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RH57BNT4VQERGEJ5SXNXSVMDYP66YD4H/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RH57BNT4VQERGEJ5SXNXSVMDYP66YD4H/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RTN2OOLKYTG34DODUEJGT5MLC2PFGPBA/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RTN2OOLKYTG34DODUEJGT5MLC2PFGPBA/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T3D5TX4TDJPXHXD2QICKTY3OCQC3JARP/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T3D5TX4TDJPXHXD2QICKTY3OCQC3JARP/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UHVW73QZJMHA4MK7JBT7CXX7XSNYQEGF/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UHVW73QZJMHA4MK7JBT7CXX7XSNYQEGF/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMDX6IFKLOA3NXUQEV524L5LHTPI2JI/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VCMDX6IFKLOA3NXUQEV524L5LHTPI2JI/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X3EJ6J7PXVQOULBQZQGBXCXY6LFF6LZD/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X3EJ6J7PXVQOULBQZQGBXCXY6LFF6LZD/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XXZJL3CNAFS5PAIR7K4RL62S3Y7THR7O/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XXZJL3CNAFS5PAIR7K4RL62S3Y7THR7O/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YPNWZKXPKTNHS5FVMN7UQZ2UPCSEFJUK/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YPNWZKXPKTNHS5FVMN7UQZ2UPCSEFJUK/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB5YCMIRVX35RUB6XPOWKENCVCJEVDRK/", "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZB5YCMIRVX35RUB6XPOWKENCVCJEVDRK/" }, { "category": "external", "summary": "https://security.gentoo.org/glsa/202305-02", "url": "https://security.gentoo.org/glsa/202305-02" }, { "category": "external", "summary": "https://security.netapp.com/advisory/ntap-20221209-0007/", "url": "https://security.netapp.com/advisory/ntap-20221209-0007/" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/11/msg00024.html", "url": "https://lists.debian.org/debian-lts-announce/2024/11/msg00024.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html", "url": "https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html" } ], "release_date": "2022-11-09T07:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-09-30T15:47:55.736969Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-alt-python/releases/CLSA-2025:1759247273", "product_ids": [ "Debian-10:alt-python36-0:3.6.15-14.amd64", "Debian-10:alt-python36-debug-0:3.6.15-14.amd64", "Debian-10:alt-python36-devel-0:3.6.15-14.amd64", "Debian-10:alt-python36-libs-0:3.6.15-14.amd64", "Debian-10:alt-python36-test-0:3.6.15-14.amd64", "Debian-10:alt-python36-tkinter-0:3.6.15-14.amd64", "Debian-10:alt-python36-tools-0:3.6.15-14.amd64" ], "url": "https://cve.tuxcare.com/els-alt-python/releases/CLSA-2025:1759247273" }, { "category": "vendor_fix", "date": "2025-10-09T15:40:38.922239Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els-alt-python/releases/CLSA-2025:1760024436", "product_ids": [ "Debian-10:alt-python27-0:2.7.18-6.amd64", "Debian-10:alt-python27-debug-0:2.7.18-6.amd64", "Debian-10:alt-python27-devel-0:2.7.18-6.amd64", "Debian-10:alt-python27-idle-0:2.7.18-6.amd64", "Debian-10:alt-python27-libs-0:2.7.18-6.amd64", "Debian-10:alt-python27-test-0:2.7.18-6.amd64", "Debian-10:alt-python27-tkinter-0:2.7.18-6.amd64", "Debian-10:alt-python27-tools-0:2.7.18-6.amd64" ], "url": "https://cve.tuxcare.com/els-alt-python/releases/CLSA-2025:1760024436" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "Debian-10:alt-python27-0:2.7.18-6.amd64", "Debian-10:alt-python27-debug-0:2.7.18-6.amd64", "Debian-10:alt-python27-devel-0:2.7.18-6.amd64", "Debian-10:alt-python27-idle-0:2.7.18-6.amd64", "Debian-10:alt-python27-libs-0:2.7.18-6.amd64", "Debian-10:alt-python27-test-0:2.7.18-6.amd64", "Debian-10:alt-python27-tkinter-0:2.7.18-6.amd64", "Debian-10:alt-python27-tools-0:2.7.18-6.amd64", "Debian-10:alt-python36-0:3.6.15-14.amd64", "Debian-10:alt-python36-debug-0:3.6.15-14.amd64", "Debian-10:alt-python36-devel-0:3.6.15-14.amd64", "Debian-10:alt-python36-libs-0:3.6.15-14.amd64", "Debian-10:alt-python36-test-0:3.6.15-14.amd64", "Debian-10:alt-python36-tkinter-0:3.6.15-14.amd64", "Debian-10:alt-python36-tools-0:3.6.15-14.amd64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] } ] }